Vulnerability Details CVE-2026-106634
Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file system. Exploitation of this issue does not require user interaction. Scope is changed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 40.0%
CVSS Severity
CVSS v3 Score 7.7
Products affected by CVE-2026-106634
-
cpe:2.3:a:adobe:experience_manager:-
-
cpe:2.3:a:adobe:experience_manager:5.6
-
cpe:2.3:a:adobe:experience_manager:5.6.1
-
cpe:2.3:a:adobe:experience_manager:6.0
-
cpe:2.3:a:adobe:experience_manager:6.1
-
cpe:2.3:a:adobe:experience_manager:6.1.0.1
-
cpe:2.3:a:adobe:experience_manager:6.1.1.0
-
cpe:2.3:a:adobe:experience_manager:6.1.2.0
-
cpe:2.3:a:adobe:experience_manager:6.1.2.1
-
cpe:2.3:a:adobe:experience_manager:6.1.2.10
-
cpe:2.3:a:adobe:experience_manager:6.1.2.11
-
cpe:2.3:a:adobe:experience_manager:6.1.2.12
-
cpe:2.3:a:adobe:experience_manager:6.1.2.13
-
cpe:2.3:a:adobe:experience_manager:6.1.2.14
-
cpe:2.3:a:adobe:experience_manager:6.1.2.15
-
cpe:2.3:a:adobe:experience_manager:6.1.2.16
-
cpe:2.3:a:adobe:experience_manager:6.1.2.2
-
cpe:2.3:a:adobe:experience_manager:6.1.2.3
-
cpe:2.3:a:adobe:experience_manager:6.1.2.4
-
cpe:2.3:a:adobe:experience_manager:6.1.2.5
-
cpe:2.3:a:adobe:experience_manager:6.1.2.6
-
cpe:2.3:a:adobe:experience_manager:6.1.2.7
-
cpe:2.3:a:adobe:experience_manager:6.1.2.8
-
cpe:2.3:a:adobe:experience_manager:6.1.2.9
-
cpe:2.3:a:adobe:experience_manager:6.2.0.0
-
cpe:2.3:a:adobe:experience_manager:6.2.0.1
-
cpe:2.3:a:adobe:experience_manager:6.2.1.0
-
cpe:2.3:a:adobe:experience_manager:6.2.1.1
-
cpe:2.3:a:adobe:experience_manager:6.2.1.10
-
cpe:2.3:a:adobe:experience_manager:6.2.1.11
-
cpe:2.3:a:adobe:experience_manager:6.2.1.12.1
-
cpe:2.3:a:adobe:experience_manager:6.2.1.13
-
cpe:2.3:a:adobe:experience_manager:6.2.1.14
-
cpe:2.3:a:adobe:experience_manager:6.2.1.15
-
cpe:2.3:a:adobe:experience_manager:6.2.1.16
-
cpe:2.3:a:adobe:experience_manager:6.2.1.2
-
cpe:2.3:a:adobe:experience_manager:6.2.1.3
-
cpe:2.3:a:adobe:experience_manager:6.2.1.4
-
cpe:2.3:a:adobe:experience_manager:6.2.1.5
-
cpe:2.3:a:adobe:experience_manager:6.2.1.6
-
cpe:2.3:a:adobe:experience_manager:6.2.1.7
-
cpe:2.3:a:adobe:experience_manager:6.2.1.8
-
cpe:2.3:a:adobe:experience_manager:6.2.1.9
-
cpe:2.3:a:adobe:experience_manager:6.3
-
cpe:2.3:a:adobe:experience_manager:6.3.0.1
-
cpe:2.3:a:adobe:experience_manager:6.3.1.0
-
cpe:2.3:a:adobe:experience_manager:6.3.2.0
-
cpe:2.3:a:adobe:experience_manager:6.3.2.1
-
cpe:2.3:a:adobe:experience_manager:6.3.2.2
-
cpe:2.3:a:adobe:experience_manager:6.3.3.0
-
cpe:2.3:a:adobe:experience_manager:6.3.3.7
-
cpe:2.3:a:adobe:experience_manager:6.3.3.8
-
cpe:2.3:a:adobe:experience_manager:6.4
-
cpe:2.3:a:adobe:experience_manager:6.4.1.0
-
cpe:2.3:a:adobe:experience_manager:6.4.2.0
-
cpe:2.3:a:adobe:experience_manager:6.4.7.0
-
cpe:2.3:a:adobe:experience_manager:6.4.8.1
-
cpe:2.3:a:adobe:experience_manager:6.4.8.2
-
cpe:2.3:a:adobe:experience_manager:6.4.8.3
-
cpe:2.3:a:adobe:experience_manager:6.4.8.4
-
cpe:2.3:a:adobe:experience_manager:6.5
-
cpe:2.3:a:adobe:experience_manager:6.5.1.0
-
cpe:2.3:a:adobe:experience_manager:6.5.10.0
-
cpe:2.3:a:adobe:experience_manager:6.5.11.0
-
cpe:2.3:a:adobe:experience_manager:6.5.12.0
-
cpe:2.3:a:adobe:experience_manager:6.5.13.0
-
cpe:2.3:a:adobe:experience_manager:6.5.14.0
-
cpe:2.3:a:adobe:experience_manager:6.5.15.0
-
cpe:2.3:a:adobe:experience_manager:6.5.16.0
-
cpe:2.3:a:adobe:experience_manager:6.5.17.0
-
cpe:2.3:a:adobe:experience_manager:6.5.18.0
-
cpe:2.3:a:adobe:experience_manager:6.5.19.0
-
cpe:2.3:a:adobe:experience_manager:6.5.2.0
-
cpe:2.3:a:adobe:experience_manager:6.5.20.0
-
cpe:2.3:a:adobe:experience_manager:6.5.21.0
-
cpe:2.3:a:adobe:experience_manager:6.5.22.0
-
cpe:2.3:a:adobe:experience_manager:6.5.23.0
-
cpe:2.3:a:adobe:experience_manager:6.5.24
-
cpe:2.3:a:adobe:experience_manager:6.5.24.0
-
cpe:2.3:a:adobe:experience_manager:6.5.25.0
-
cpe:2.3:a:adobe:experience_manager:6.5.3.0
-
cpe:2.3:a:adobe:experience_manager:6.5.4.0
-
cpe:2.3:a:adobe:experience_manager:6.5.5.0
-
cpe:2.3:a:adobe:experience_manager:6.5.6.0
-
cpe:2.3:a:adobe:experience_manager:6.5.7.0
-
cpe:2.3:a:adobe:experience_manager:6.5.8.0
-
cpe:2.3:a:adobe:experience_manager:6.5.9.0